This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer File: Qnc6qEHXDnPE730nyY_LnUQgxGw.cer (raw, json) Hash identifier: k+8cO0LNej/0KntrFOf3Azufz/UCp4c1atSpgPh4DP0= Subject key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279F0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 05:11:41 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 103.142.248.0/23 IP: 2001:df1:6180::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162288 (0x279f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 05:11:41 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8d:3d:bd:35:6d:16:c6:20:8f:0c:d0:b7:ee: 2b:0e:a9:39:b6:26:44:de:e7:d7:31:51:1e:3c:bc: 0c:79:db:4b:21:75:f9:af:4d:c0:e3:81:c3:da:1e: 86:c8:70:01:5e:8a:8c:2f:5c:19:79:a3:92:79:66: 12:13:63:e9:2e:03:5f:6e:70:9e:87:a1:f7:e4:28: fd:d9:01:3d:cf:22:d8:04:bb:17:7c:99:85:c0:b6: 67:8d:00:af:05:f3:b3:13:d9:2a:2f:1e:80:60:8c: 79:7c:12:42:8e:82:75:89:be:4c:35:6d:cd:25:d8: ed:4a:ea:75:8e:cc:8e:7f:cf:98:b8:20:df:74:6c: 13:a0:bc:4f:a9:56:84:46:75:06:0e:9e:88:1b:6e: 21:86:50:70:4a:56:cb:d6:1e:ee:5a:cc:bb:95:f2: 60:72:3f:b7:30:f1:63:20:ce:aa:50:d7:c9:f3:8f: 3f:70:11:3b:fc:9e:08:36:a6:42:da:cd:87:5a:e3: c9:33:ef:f3:f5:f1:b5:96:28:3f:14:61:db:46:da: e5:a3:6a:dd:d7:77:79:8c:cd:4f:32:76:63:bc:e5: c0:76:f1:6a:c2:00:e0:0e:bf:36:c0:f8:78:35:43: bb:56:00:0d:5c:0e:3f:00:de:fc:5b:75:b7:d8:9d: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.248.0/23 IPv6: 2001:df1:6180::/48 Signature Algorithm: sha256WithRSAEncryption 5c:8c:be:73:5a:2f:30:cc:f3:4a:7f:ed:a6:1e:37:5a:48:92: 01:ab:13:42:3f:d0:5b:0f:98:10:a9:e2:e5:c8:74:d4:5c:98: 1d:11:e1:aa:cc:c6:4e:7d:15:ab:35:c7:bb:bd:e6:49:22:6a: 41:fb:31:e5:e7:0c:f8:72:0e:c2:7d:65:38:38:ad:33:d0:55: 3c:00:47:d3:a7:db:a7:37:ff:af:7e:0e:11:2f:c2:99:5d:9f: 5a:61:64:ec:5c:97:81:81:62:24:f1:c5:aa:d7:a3:11:56:99: cb:56:b3:f4:83:c3:47:7a:31:06:45:12:c4:fc:c9:21:4a:d0: 1c:06:2e:61:aa:f9:43:d4:c9:9c:4f:85:cf:6b:a5:43:74:82: 51:34:71:f4:e3:9f:76:98:9e:be:4d:ec:b9:95:16:bf:e9:b2: 70:00:bb:be:49:9a:77:7d:ec:21:74:41:92:00:73:c1:90:57: ca:af:b6:68:b1:ea:57:db:02:2f:f8:a5:da:e2:6f:3a:cc:27: ed:cb:80:cb:25:19:92:b8:3f:3a:61:7d:e0:d1:2e:ec:31:0b: 69:c4:db:83:56:7c:2a:88:63:29:6c:aa:37:a5:a6:17:fa:bb: a8:84:b3:99:0f:ec:77:fe:0e:f4:ea:a2:f6:88:db:c3:95:c2: ec:67:17:d2 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAnnwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTA1MTE0MVoXDTI2MDMzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzhCQzExMTAvBgNVBAUTKDQyNzczQUE4NDFENzBFNzNDNEVGN0Qy N0M5OEZDQjlENDQyMEM0NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzjT29NW0WxiCPDNC37isOqTm2JkTe59cxUR48vAx520shdfmvTcDjgcPaHobI cAFeiowvXBl5o5J5ZhITY+kuA19ucJ6HoffkKP3ZAT3PItgEuxd8mYXAtmeNAK8F 87MT2SovHoBgjHl8EkKOgnWJvkw1bc0l2O1K6nWOzI5/z5i4IN90bBOgvE+pVoRG dQYOnogbbiGGUHBKVsvWHu5azLuV8mByP7cw8WMgzqpQ18nzjz9wETv8ngg2pkLa zYda48kz7/P18bWWKD8UYdtG2uWjat3Xd3mMzU8ydmO85cB28WrCAOAOvzbA+Hg1 Q7tWAA1cDj8A3vxbdbfYneAzAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUQnc6qEHX DnPE730nyY/LnUQgxGwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM4QkMxLzE1MkQ1Qzg2MUI2OTExRjBCRkZDM0YyRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzOEJDMS8xNTJENUM4NjFCNjkxMUYwQkZGQzNGMkZDNEY5QUUwMi9RbmM2cUVI WERuUEU3MzBueVlfTG5VUWd4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBAFnjvgwDwQCAAIwCQMHACABDfFhgDANBgkqhkiG9w0BAQsFAAOC AQEAXIy+c1ovMMzzSn/tph43WkiSAasTQj/QWw+YEKni5ch01FyYHRHhqszGTn0V qzXHu73mSSJqQfsx5ecM+HIOwn1lODitM9BVPABH06fbpzf/r34OES/CmV2fWmFk 7FyXgYFiJPHFqtejEVaZy1az9IPDR3oxBkUSxPzJIUrQHAYuYar5Q9TJnE+Fz2ul Q3SCUTRx9OOfdpievk3suZUWv+mycAC7vkmad33sIXRBkgBzwZBXyq+2aLHqV9sC L/il2uJvOswn7cuAyyUZkrg/OmF94NEu7DELacTbg1Z8KohjKWyqN6WmF/q7qISz mQ/sd/4O9Oqi9ojbw5XC7GcX0g== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:02 2025 by rpki-client